run-llama llama_index up to 0.12.2 VannaPack VannaQueryEngine custom_query allocation of resources

Summaryinfo

A vulnerability was found in run-llama llama_index up to 0.12.2. It has been declared as critical. This impacts the function custom_query of the component VannaPack VannaQueryEngine. Such manipulation leads to allocation of resources. This vulnerability is traded as CVE-2024-58339. The attack may be launched remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in run-llama llama_index up to 0.12.2. It has been rated as critical. Affected by this issue is the function custom_query of the component VannaPack VannaQueryEngine. The manipulation with an unknown input leads to a allocation of resources vulnerability. Using CWE to declare the problem leads to CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor. Impacted is availability. CVE summarizes:

LlamaIndex (run-llama/llama_index) versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The custom_query() logic generates SQL statements from a user-supplied prompt and executes them via vn.run_sql() without enforcing query execution limits In downstream deployments where untrusted users can supply prompts, an attacker can trigger expensive or unbounded SQL operations that exhaust CPU or memory resources, resulting in a denial-of-service condition. The vulnerable execution path occurs in llama_index/packs/vanna/base.py within custom_query().

The weakness was shared by LifeTeam2024. The advisory is available at huntr.com. This vulnerability is handled as CVE-2024-58339 since 01/09/2026. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit. This vulnerability is assigned to T1499 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-2397). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• run-llama

Name

• llama_index

Version

• 0.12.0
• 0.12.1
• 0.12.2

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion